@tutti-os/tutti-admin-cli 0.1.0

package/README.md

@@ -0,0 +1,44 @@
+# tutti-admin-cli
+
+Internal CLI for Tutti admin operations. The first workflow is App Center
+release publishing, but the command surface is intentionally broader than app
+uploads so it can grow with admin automation.
+
+## Auth
+
+Create a management token in TSH Admin Dashboard -> 管理密钥, then run:
+
+```bash
+tutti-admin auth login --admin-url https://admin.nextop.sh
+tutti-admin auth whoami
+```
+
+The CLI stores the token in `~/.config/tutti-admin/config.json` with `0600`
+permissions. CI can provide `TUTTI_ADMIN_TOKEN` instead.
+
+## App Release
+
+```bash
+tutti-admin app list --brand nextop --query design
+tutti-admin app detail --brand nextop --app-id vibe-design --include latest,versions
+tutti-admin app validate --zip ./output/vibe-design.zip
+tutti-admin app release --brand nextop --app-id vibe-design --zip ./output/vibe-design.zip --publish --latest
+```
+
+`app release` validates the zip, creates an artifact upload session, uploads the
+zip, creates the App Center version, and optionally publishes it and moves the
+latest pointer.
+
+## Maintenance
+
+```bash
+tutti-admin app create --brand nextop --app-id vibe-design --name "Vibe Design"
+tutti-admin app edit --brand nextop --app-id vibe-design --name "Vibe Design" --icon ./assets/icon.png
+tutti-admin app publish --brand nextop --app-id vibe-design --version 0.1.47 --latest
+tutti-admin app rollback --brand nextop --app-id vibe-design --version 0.1.46
+tutti-admin app archive --brand nextop --app-id vibe-design --version 0.1.45
+```
+
+`app create` and `app edit` accept either `--icon <file>` to upload a PNG/JPEG/WebP
+icon through App Center asset upload, or `--icon-url <url>` when the asset is
+already hosted.

package/dist/appApi.d.ts

@@ -0,0 +1,31 @@
+import type { HttpClient } from './http.js';
+export interface AppReleaseOptions {
+    brand: string;
+    appId: string;
+    zip: string;
+    publish?: boolean;
+    latest?: boolean;
+    reason?: string;
+}
+export declare class AppApi {
+    private readonly http;
+    constructor(http: HttpClient);
+    list(query?: string): Promise<unknown[]>;
+    detail(appId: string, include?: string[]): Promise<Record<string, unknown>>;
+    create(data: Record<string, unknown>): Promise<unknown>;
+    edit(appId: string, data: Record<string, unknown>): Promise<unknown>;
+    uploadAppIcon(appId: string, filePath: string): Promise<string>;
+    versions(appId: string): Promise<unknown[]>;
+    publish(appId: string, version: string, latest: boolean, reason?: string): Promise<unknown>;
+    setLatest(appId: string, version: string, reason?: string): Promise<unknown>;
+    archive(appId: string, version: string, reason?: string): Promise<unknown>;
+    release(options: AppReleaseOptions): Promise<{
+        version: unknown;
+        artifact: {
+            artifactUrl: string;
+            objectKey: string | undefined;
+        };
+        manifest: import("./zip.js").TuttiAppManifest;
+    }>;
+    private findApp;
+}

package/dist/appApi.js

@@ -0,0 +1,153 @@
+import { stat } from 'node:fs/promises';
+import { basename } from 'node:path';
+import { lookup } from 'mime-types';
+import { uploadAdminAsset, uploadAppZip } from './upload.js';
+import { hashFile, inspectZip } from './zip.js';
+const APP_CENTER_BASE = '/api/desktop/v1/admin/app-center';
+export class AppApi {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    list(query) {
+        return this.http.get(`${APP_CENTER_BASE}/apps`).then((reply) => {
+            const apps = reply.apps ?? [];
+            if (!query) {
+                return apps;
+            }
+            const needle = query.toLowerCase();
+            return apps.filter((item) => JSON.stringify(item).toLowerCase().includes(needle));
+        });
+    }
+    async detail(appId, include = []) {
+        const apps = await this.list();
+        const app = apps.find((item) => getField(item, 'appId', 'app_id') === appId);
+        const out = { app };
+        if (include.includes('versions') || include.includes('latest')) {
+            const versions = await this.versions(appId);
+            out.versions = versions;
+            if (include.includes('latest')) {
+                const latestVersionId = getField(app, 'latestVersionId', 'latest_version_id');
+                out.latest = versions.find((item) => getField(item, 'versionId', 'version_id') === latestVersionId);
+            }
+        }
+        return out;
+    }
+    create(data) {
+        return this.http.post(`${APP_CENTER_BASE}/apps`, data);
+    }
+    edit(appId, data) {
+        return this.http.patch(`${APP_CENTER_BASE}/apps/${encodeURIComponent(appId)}`, data);
+    }
+    async uploadAppIcon(appId, filePath) {
+        const info = await stat(filePath);
+        if (!info.isFile()) {
+            throw new Error(`${filePath} is not a file`);
+        }
+        const contentType = lookup(filePath) || 'application/octet-stream';
+        const sha256 = await hashFile(filePath);
+        const asset = await uploadAdminAsset(this.http, {
+            purpose: 'app_icon',
+            appId,
+            filePath,
+            fileName: appIconUploadFileName(contentType, sha256),
+            contentType,
+            sizeBytes: info.size,
+            sha256,
+        });
+        return asset.assetUrl;
+    }
+    versions(appId) {
+        return this.http
+            .get(`${APP_CENTER_BASE}/apps/${encodeURIComponent(appId)}/versions`)
+            .then((reply) => reply.versions ?? []);
+    }
+    publish(appId, version, latest, reason) {
+        return this.http
+            .post(`${APP_CENTER_BASE}/apps/${encodeURIComponent(appId)}/versions/${encodeURIComponent(version)}/publish`, {
+            appId,
+            versionId: version,
+            reason,
+        })
+            .then(async (reply) => {
+            if (latest) {
+                await this.setLatest(appId, version, reason);
+            }
+            return reply;
+        });
+    }
+    setLatest(appId, version, reason) {
+        return this.http.post(`${APP_CENTER_BASE}/apps/${encodeURIComponent(appId)}/versions/${encodeURIComponent(version)}/set-latest`, { appId, versionId: version, reason });
+    }
+    archive(appId, version, reason) {
+        return this.http.post(`${APP_CENTER_BASE}/apps/${encodeURIComponent(appId)}/versions/${encodeURIComponent(version)}/archive`, { appId, versionId: version, reason });
+    }
+    async release(options) {
+        const zip = await inspectZip(options.zip);
+        if (zip.appId !== options.appId) {
+            throw new Error(`zip appId ${zip.appId} does not match --app-id ${options.appId}`);
+        }
+        const app = await this.findApp(options.appId);
+        if (!app) {
+            throw new Error(`app ${options.appId} not found`);
+        }
+        const versionId = zip.version;
+        const versions = await this.versions(options.appId);
+        const existingVersion = versions.find((item) => getField(item, 'versionId', 'version_id') === versionId);
+        if (existingVersion) {
+            throw new Error(`app ${options.appId} version ${versionId} already exists`);
+        }
+        const contentType = lookup(options.zip) || 'application/zip';
+        const artifact = await uploadAppZip(this.http, {
+            appId: options.appId,
+            versionId,
+            filePath: options.zip,
+            fileName: basename(options.zip),
+            contentType,
+            sha256: zip.sha256,
+            sizeBytes: zip.sizeBytes,
+        });
+        const version = await this.http.post(`${APP_CENTER_BASE}/apps/${encodeURIComponent(options.appId)}/versions`, {
+            appId: options.appId,
+            versionId,
+            artifactKind: 'zip',
+            artifactUrl: artifact.artifactUrl,
+            artifactSha256: zip.sha256,
+            artifactSizeBytes: zip.sizeBytes,
+            runtimeBootstrap: zip.manifest.runtime?.bootstrap,
+            runtimeHealthcheckPath: zip.manifest.runtime?.healthcheckPath,
+            reason: options.reason,
+        });
+        if (options.publish || options.latest) {
+            await this.publish(options.appId, versionId, Boolean(options.latest), options.reason);
+        }
+        return { version, artifact, manifest: zip.manifest };
+    }
+    async findApp(appId) {
+        const apps = await this.list();
+        return apps.find((item) => getField(item, 'appId', 'app_id') === appId);
+    }
+}
+function appIconUploadFileName(contentType, sha256) {
+    const ext = contentType === 'image/png'
+        ? 'png'
+        : contentType === 'image/jpeg'
+            ? 'jpg'
+            : contentType === 'image/webp'
+                ? 'webp'
+                : 'bin';
+    return `icon-${sha256.slice(0, 12)}.${ext}`;
+}
+function getField(item, ...fields) {
+    if (!item || typeof item !== 'object') {
+        return undefined;
+    }
+    const record = item;
+    for (const field of fields) {
+        if (record[field] !== undefined) {
+            return record[field];
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=appApi.js.map

package/dist/appApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appApi.js","sourceRoot":"","sources":["../src/appApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEhD,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAW3D,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,IAAI,CAAC,KAAc;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,GAAG,eAAe,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,UAAoB,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC;QAC7E,MAAM,GAAG,GAA4B,EAAE,GAAG,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACxB,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;gBAC9E,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,KAAK,eAAe,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,CAAC,IAA6B;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,eAAe,OAAO,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,IAA6B;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,eAAe,SAAS,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,0BAA0B,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,UAAU;YACnB,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC;YACpD,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,MAAM;SACP,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,QAAQ,CAAC;IACxB,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,IAAI;aACb,GAAG,CAA2B,GAAG,eAAe,SAAS,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC;aAC9F,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,OAAe,EAAE,MAAe,EAAE,MAAe;QACtE,OAAO,IAAI,CAAC,IAAI;aACb,IAAI,CAAC,GAAG,eAAe,SAAS,kBAAkB,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE;YAC5G,KAAK;YACL,SAAS,EAAE,OAAO;YAClB,MAAM;SACP,CAAC;aACD,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACpB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACP,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,OAAe,EAAE,MAAe;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,GAAG,eAAe,SAAS,kBAAkB,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,OAAO,CAAC,aAAa,EACzG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,OAAe,EAAE,MAAe;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,GAAG,eAAe,SAAS,kBAAkB,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,OAAO,CAAC,UAAU,EACtG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,4BAA4B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,OAAO,OAAO,CAAC,KAAK,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC;QACzG,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,OAAO,OAAO,CAAC,KAAK,YAAY,SAAS,iBAAiB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE;YAC7C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;YAC/B,WAAW;YACX,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,eAAe,SAAS,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;YAC5G,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS;YACT,YAAY,EAAE,KAAK;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,cAAc,EAAE,GAAG,CAAC,MAAM;YAC1B,iBAAiB,EAAE,GAAG,CAAC,SAAS;YAChC,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS;YACjD,sBAAsB,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe;YAC7D,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC;IAC1E,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,WAA2B,EAAE,MAAc;IACxE,MAAM,GAAG,GACP,WAAW,KAAK,WAAW;QACzB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,WAAW,KAAK,YAAY;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,WAAW,KAAK,YAAY;gBAC5B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,KAAK,CAAC;IAChB,OAAO,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,GAAG,MAAgB;IAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,16 @@
+export interface StoredConfig {
+    adminUrl?: string;
+    token?: string;
+}
+declare const CONFIG_PATH: string;
+export declare function normalizeApiOrigin(input?: string): string;
+export declare function readConfig(): Promise<StoredConfig>;
+export declare function writeConfig(config: StoredConfig): Promise<void>;
+export declare function resolveRuntimeConfig(options?: {
+    adminUrl?: string;
+    token?: string;
+}): Promise<{
+    adminUrl: string;
+    token: string;
+}>;
+export { CONFIG_PATH };

package/dist/config.js

@@ -0,0 +1,37 @@
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const CONFIG_PATH = join(homedir(), '.config', 'tutti-admin', 'config.json');
+export function normalizeApiOrigin(input) {
+    const raw = (input || process.env.TUTTI_ADMIN_URL || 'https://nextop.sh').trim();
+    const url = new URL(raw);
+    if (url.hostname === 'admin.nextop.sh') {
+        return 'https://nextop.sh';
+    }
+    if (url.hostname === 'admin.svenzeng.com') {
+        return 'https://svenzeng.com';
+    }
+    return url.origin;
+}
+export async function readConfig() {
+    try {
+        const raw = await readFile(CONFIG_PATH, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+export async function writeConfig(config) {
+    await mkdir(dirname(CONFIG_PATH), { recursive: true });
+    await writeFile(CONFIG_PATH, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
+    await chmod(CONFIG_PATH, 0o600);
+}
+export async function resolveRuntimeConfig(options = {}) {
+    const stored = await readConfig();
+    const adminUrl = normalizeApiOrigin(options.adminUrl || stored.adminUrl);
+    const token = (options.token || process.env.TUTTI_ADMIN_TOKEN || stored.token || '').trim();
+    return { adminUrl, token };
+}
+export { CONFIG_PATH };
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACvC,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC1C,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAiD,EAAE;IAC5F,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,17 @@
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+export interface HttpClientOptions {
+    adminUrl: string;
+    token?: string;
+}
+export declare class HttpClient {
+    private readonly options;
+    constructor(options: HttpClientOptions);
+    request<T>(method: string, path: string, body?: unknown): Promise<T>;
+    get<T>(path: string): Promise<T>;
+    post<T>(path: string, body?: unknown): Promise<T>;
+    patch<T>(path: string, body?: unknown): Promise<T>;
+}

package/dist/http.js

@@ -0,0 +1,60 @@
+export class HttpError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+    }
+}
+export class HttpClient {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async request(method, path, body) {
+        const headers = {
+            accept: 'application/json',
+        };
+        if (this.options.token) {
+            headers.authorization = `Bearer ${this.options.token}`;
+        }
+        let payload;
+        if (body !== undefined) {
+            headers['content-type'] = 'application/json';
+            payload = JSON.stringify(body);
+        }
+        const response = await fetch(`${this.options.adminUrl}${path}`, {
+            method,
+            headers,
+            body: payload,
+        });
+        const text = await response.text();
+        const parsed = parseResponseBody(text);
+        if (!response.ok) {
+            throw new HttpError(`HTTP ${response.status} ${response.statusText}`, response.status, parsed);
+        }
+        return parsed;
+    }
+    get(path) {
+        return this.request('GET', path);
+    }
+    post(path, body) {
+        return this.request('POST', path, body);
+    }
+    patch(path, body) {
+        return this.request('PATCH', path, body);
+    }
+}
+function parseResponseBody(text) {
+    if (!text.trim()) {
+        return {};
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAGvB;IACA;IAHX,YACE,OAAe,EACN,MAAc,EACd,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;IAGxB,CAAC;CACF;AAOD,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE3D,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAC3D,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,OAA6B,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE;YAC9D,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;IAED,GAAG,CAAI,IAAY;QACjB,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAI,IAAY,EAAE,IAAc;QAClC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAI,IAAY,EAAE,IAAc;QACnC,OAAO,IAAI,CAAC,OAAO,CAAI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,170 @@
+#!/usr/bin/env node
+import { createInterface } from 'node:readline/promises';
+import { stdin as input, stdout as output } from 'node:process';
+import { Command } from 'commander';
+import { AppApi } from './appApi.js';
+import { CONFIG_PATH, readConfig, resolveRuntimeConfig, writeConfig } from './config.js';
+import { HttpClient } from './http.js';
+import { inspectZip } from './zip.js';
+const program = new Command();
+program
+    .name('tutti-admin')
+    .description('Internal Tutti admin CLI')
+    .option('--admin-url <url>', 'admin API URL, or admin.nextop.sh page URL')
+    .option('--token <token>', 'admin API token')
+    .option('--json', 'print JSON output');
+const auth = program.command('auth');
+auth
+    .command('login')
+    .option('--admin-url <url>', 'admin API URL, or admin.nextop.sh page URL')
+    .action(async (options) => {
+    const rl = createInterface({ input, output });
+    try {
+        const root = program.opts();
+        const adminUrl = (options.adminUrl || root.adminUrl || 'https://admin.nextop.sh').trim();
+        const token = (await rl.question('Paste Tutti admin token: ')).trim();
+        const runtime = await resolveRuntimeConfig({ adminUrl, token });
+        await inspectAdminToken(new HttpClient(runtime), token);
+        await writeConfig({ ...(await readConfig()), adminUrl, token });
+        console.log(`Logged in. Config saved to ${CONFIG_PATH}`);
+    }
+    finally {
+        rl.close();
+    }
+});
+auth.command('logout').action(async () => {
+    const current = await readConfig();
+    await writeConfig({ ...current, token: undefined });
+    console.log('Logged out.');
+});
+auth.command('whoami').action(run(async (client) => inspectAdminToken(client)));
+auth.command('token').command('inspect').action(run(async (client) => inspectAdminToken(client)));
+program.command('system').command('health').action(run(async (client) => client.get('/health')));
+const app = program.command('app');
+app
+    .command('list')
+    .requiredOption('--brand <brand>')
+    .option('--query <query>')
+    .action(runApp(async (api, options) => api.list(options.query)));
+app
+    .command('detail')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .option('--include <include>', 'comma separated: latest,versions')
+    .action(runApp(async (api, options) => api.detail(options.appId, splitCSV(options.include))));
+app
+    .command('create')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .requiredOption('--name <name>')
+    .option('--description <description>')
+    .option('--icon <path>', 'upload an app icon and use its asset URL')
+    .option('--icon-url <iconUrl>')
+    .option('--status <status>', 'draft|published|hidden|disabled|archived', 'draft')
+    .action(runApp(async (api, options) => api.create({
+    appId: options.appId,
+    displayNameKey: options.appId,
+    descriptionKey: `${options.appId}.description`,
+    fallbackDisplayName: options.name,
+    fallbackDescription: options.description,
+    iconUrl: await resolveIconUrl(api, options),
+    status: options.status,
+})));
+app
+    .command('edit')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .option('--name <name>')
+    .option('--description <description>')
+    .option('--icon <path>', 'upload an app icon and use its asset URL')
+    .option('--icon-url <iconUrl>')
+    .option('--status <status>')
+    .action(runApp(async (api, options) => api.edit(options.appId, {
+    fallbackDisplayName: options.name,
+    fallbackDescription: options.description,
+    iconUrl: await resolveIconUrl(api, options),
+    status: options.status,
+})));
+app
+    .command('validate')
+    .requiredOption('--zip <zip>')
+    .action(async (options) => print(await inspectZip(options.zip)));
+app
+    .command('release')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .requiredOption('--zip <zip>')
+    .option('--publish')
+    .option('--latest')
+    .option('--reason <reason>')
+    .action(runApp((api, options) => api.release(options)));
+app
+    .command('publish')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .requiredOption('--version <version>')
+    .option('--latest')
+    .option('--reason <reason>')
+    .action(runApp((api, options) => api.publish(options.appId, options.version, Boolean(options.latest), options.reason)));
+app
+    .command('rollback')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .requiredOption('--version <version>')
+    .option('--reason <reason>')
+    .action(runApp((api, options) => api.setLatest(options.appId, options.version, options.reason)));
+app
+    .command('archive')
+    .requiredOption('--brand <brand>')
+    .requiredOption('--app-id <appId>')
+    .requiredOption('--version <version>')
+    .option('--reason <reason>')
+    .action(runApp((api, options) => api.archive(options.appId, options.version, options.reason)));
+program.parseAsync().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+});
+function run(handler) {
+    return async () => {
+        const options = program.opts();
+        const runtime = await resolveRuntimeConfig(options);
+        if (!runtime.token) {
+            throw new Error('TUTTI_ADMIN_TOKEN is required. Run `tutti-admin auth login` first.');
+        }
+        print(await handler(new HttpClient(runtime)));
+    };
+}
+function runApp(handler) {
+    return async (options) => {
+        const rootOptions = program.opts();
+        const runtime = await resolveRuntimeConfig(rootOptions);
+        if (!runtime.token) {
+            throw new Error('TUTTI_ADMIN_TOKEN is required. Run `tutti-admin auth login` first.');
+        }
+        print(await handler(new AppApi(new HttpClient(runtime)), options));
+    };
+}
+function print(value) {
+    console.log(JSON.stringify(value, null, 2));
+}
+function splitCSV(value) {
+    return (value ?? '')
+        .split(',')
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+async function resolveIconUrl(api, options) {
+    const icon = String(options.icon ?? '').trim();
+    const iconUrl = String(options.iconUrl ?? '').trim();
+    if (icon && iconUrl) {
+        throw new Error('Use either --icon or --icon-url, not both.');
+    }
+    if (!icon) {
+        return iconUrl || undefined;
+    }
+    return api.uploadAppIcon(options.appId, icon);
+}
+function inspectAdminToken(client, token) {
+    return client.post('/api/v1/admin/auth/token/inspect', token ? { token_value: token } : {});
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAA0B,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,aAAa,CAAC;KACnB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KAC5C,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAEzC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAErC,IAAI;KACD,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;KACzE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,iBAAiB,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACvC,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,MAAM,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAChF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAElG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAEjG,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEnC,GAAG;KACA,OAAO,CAAC,MAAM,CAAC;KACf,cAAc,CAAC,iBAAiB,CAAC;KACjC,MAAM,CAAC,iBAAiB,CAAC;KACzB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnE,GAAG;KACA,OAAO,CAAC,QAAQ,CAAC;KACjB,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,MAAM,CAAC,qBAAqB,EAAE,kCAAkC,CAAC;KACjE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhG,GAAG;KACA,OAAO,CAAC,QAAQ,CAAC;KACjB,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,cAAc,CAAC,eAAe,CAAC;KAC/B,MAAM,CAAC,6BAA6B,CAAC;KACrC,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;KACnE,MAAM,CAAC,sBAAsB,CAAC;KAC9B,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,EAAE,OAAO,CAAC;KAChF,MAAM,CACL,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAC5B,GAAG,CAAC,MAAM,CAAC;IACT,KAAK,EAAE,OAAO,CAAC,KAAK;IACpB,cAAc,EAAE,OAAO,CAAC,KAAK;IAC7B,cAAc,EAAE,GAAG,OAAO,CAAC,KAAK,cAAc;IAC9C,mBAAmB,EAAE,OAAO,CAAC,IAAI;IACjC,mBAAmB,EAAE,OAAO,CAAC,WAAW;IACxC,OAAO,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,MAAM,EAAE,OAAO,CAAC,MAAM;CACvB,CAAC,CACH,CACF,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,MAAM,CAAC;KACf,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,MAAM,CAAC,eAAe,CAAC;KACvB,MAAM,CAAC,6BAA6B,CAAC;KACrC,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;KACnE,MAAM,CAAC,sBAAsB,CAAC;KAC9B,MAAM,CAAC,mBAAmB,CAAC;KAC3B,MAAM,CACL,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;IACtB,mBAAmB,EAAE,OAAO,CAAC,IAAI;IACjC,mBAAmB,EAAE,OAAO,CAAC,WAAW;IACxC,OAAO,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,MAAM,EAAE,OAAO,CAAC,MAAM;CACvB,CAAC,CACH,CACF,CAAC;AAEJ,GAAG;KACA,OAAO,CAAC,UAAU,CAAC;KACnB,cAAc,CAAC,aAAa,CAAC;KAC7B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEnE,GAAG;KACA,OAAO,CAAC,SAAS,CAAC;KAClB,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,cAAc,CAAC,aAAa,CAAC;KAC7B,MAAM,CAAC,WAAW,CAAC;KACnB,MAAM,CAAC,UAAU,CAAC;KAClB,MAAM,CAAC,mBAAmB,CAAC;KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAA4B,CAAC,CAAC,CAAC,CAAC;AAE/E,GAAG;KACA,OAAO,CAAC,SAAS,CAAC;KAClB,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,cAAc,CAAC,qBAAqB,CAAC;KACrC,MAAM,CAAC,UAAU,CAAC;KAClB,MAAM,CAAC,mBAAmB,CAAC;KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE1H,GAAG;KACA,OAAO,CAAC,UAAU,CAAC;KACnB,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,cAAc,CAAC,qBAAqB,CAAC;KACrC,MAAM,CAAC,mBAAmB,CAAC;KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEnG,GAAG;KACA,OAAO,CAAC,SAAS,CAAC;KAClB,cAAc,CAAC,iBAAiB,CAAC;KACjC,cAAc,CAAC,kBAAkB,CAAC;KAClC,cAAc,CAAC,qBAAqB,CAAC;KACrC,MAAM,CAAC,mBAAmB,CAAC;KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEjG,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACnC,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,SAAS,GAAG,CAAI,OAA2C;IACzD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,MAAM,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAI,OAAkE;IACnF,OAAO,KAAK,EAAE,OAA4B,EAAE,EAAE;QAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,MAAM,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,OAA4B;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,OAAO,IAAI,SAAS,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB,EAAE,KAAc;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/dist/upload.d.ts

@@ -0,0 +1,25 @@
+import type { HttpClient } from './http.js';
+export declare function uploadAdminAsset(http: HttpClient, input: {
+    purpose: string;
+    appId: string;
+    filePath: string;
+    fileName: string;
+    contentType: string;
+    sizeBytes: number;
+    sha256: string;
+}): Promise<{
+    assetUrl: string;
+    objectKey: string | undefined;
+}>;
+export declare function uploadAppZip(http: HttpClient, input: {
+    appId: string;
+    versionId: string;
+    filePath: string;
+    fileName: string;
+    contentType: string;
+    sizeBytes: number;
+    sha256: string;
+}): Promise<{
+    artifactUrl: string;
+    objectKey: string | undefined;
+}>;

package/dist/upload.js

@@ -0,0 +1,100 @@
+import { createReadStream } from 'node:fs';
+import { S3Client } from '@aws-sdk/client-s3';
+import { Upload } from '@aws-sdk/lib-storage';
+const APP_CENTER_BASE = '/api/desktop/v1/admin/app-center';
+export async function uploadAdminAsset(http, input) {
+    const session = await http.post(`${APP_CENTER_BASE}/asset-upload-sessions`, {
+        purpose: input.purpose,
+        appId: input.appId,
+        fileName: input.fileName,
+        contentType: input.contentType,
+        sizeBytes: input.sizeBytes,
+        sha256: input.sha256,
+    });
+    await signedPutUpload(input.filePath, input.contentType, session);
+    const assetUrl = (session.assetUrl ?? session.asset_url ?? '').trim();
+    if (!assetUrl) {
+        throw new Error('asset upload succeeded but assetUrl is empty');
+    }
+    return { assetUrl, objectKey: session.objectKey ?? session.object_key };
+}
+export async function uploadAppZip(http, input) {
+    const session = await http.post(`${APP_CENTER_BASE}/artifact-upload-sessions`, {
+        appId: input.appId,
+        versionId: input.versionId,
+        fileName: input.fileName,
+        contentType: input.contentType,
+        sizeBytes: input.sizeBytes,
+        sha256: input.sha256,
+    });
+    if (hasMultipartSession(session)) {
+        await multipartUpload(input.filePath, input.contentType, session);
+    }
+    else {
+        await signedPutUpload(input.filePath, input.contentType, session);
+    }
+    const artifactUrl = (session.artifactUrl ?? session.artifact_url ?? '').trim();
+    if (!artifactUrl) {
+        throw new Error('upload succeeded but artifactUrl is empty');
+    }
+    return { artifactUrl, objectKey: session.objectKey ?? session.object_key };
+}
+function hasMultipartSession(session) {
+    const credentials = session.credentials ?? {};
+    return Boolean(session.bucket &&
+        session.region &&
+        (session.objectKey ?? session.object_key) &&
+        (credentials.accessKeyId ?? credentials.access_key_id) &&
+        (credentials.secretAccessKey ?? credentials.secret_access_key) &&
+        (credentials.sessionToken ?? credentials.session_token));
+}
+async function signedPutUpload(filePath, contentType, session) {
+    const signature = session.uploadSignature ?? session.upload_signature ?? {};
+    const uploadUrl = (signature.uploadUrl ?? signature.upload_url ?? '').trim();
+    if (!uploadUrl) {
+        throw new Error('upload session missing uploadUrl');
+    }
+    const headers = new Headers(signature.headers ?? {});
+    if (!headers.has('content-type')) {
+        headers.set('content-type', contentType);
+    }
+    const response = await fetch(uploadUrl, {
+        method: 'PUT',
+        headers,
+        body: createReadStream(filePath),
+        duplex: 'half',
+    });
+    if (!response.ok) {
+        throw new Error(`artifact upload failed: HTTP ${response.status}`);
+    }
+}
+async function multipartUpload(filePath, contentType, session) {
+    const credentials = session.credentials ?? {};
+    const multipart = session.multipart ?? {};
+    const client = new S3Client({
+        region: session.region,
+        endpoint: session.endpoint || undefined,
+        forcePathStyle: session.forcePathStyle ?? session.force_path_style ?? false,
+        requestChecksumCalculation: 'WHEN_REQUIRED',
+        credentials: {
+            accessKeyId: credentials.accessKeyId ?? credentials.access_key_id ?? '',
+            secretAccessKey: credentials.secretAccessKey ?? credentials.secret_access_key ?? '',
+            sessionToken: credentials.sessionToken ?? credentials.session_token ?? '',
+        },
+    });
+    const upload = new Upload({
+        client,
+        params: {
+            Bucket: session.bucket,
+            Key: session.objectKey ?? session.object_key,
+            Body: createReadStream(filePath),
+            ContentType: contentType,
+            Metadata: session.uploadConstraints?.metadata ?? session.upload_constraints?.metadata,
+        },
+        queueSize: Number(multipart.maxConcurrency ?? multipart.max_concurrency ?? 4),
+        partSize: Number(multipart.partSizeBytes ?? multipart.part_size_bytes ?? 8 * 1024 * 1024),
+        leavePartsOnError: false,
+    });
+    await upload.done();
+}
+//# sourceMappingURL=upload.js.map

package/dist/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,MAAM,eAAe,GAAG,kCAAkC,CAAC;AA+C3D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAgB,EAChB,KAQC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,GAAG,eAAe,wBAAwB,EAAE;QACzF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,KAQC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,GAAG,eAAe,2BAA2B,EAAE;QAC5F,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsB;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,OAAO,OAAO,CACZ,OAAO,CAAC,MAAM;QACZ,OAAO,CAAC,MAAM;QACd,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC;QACzC,CAAC,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,CAAC;QACtD,CAAC,WAAW,CAAC,eAAe,IAAI,WAAW,CAAC,iBAAiB,CAAC;QAC9D,CAAC,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,aAAa,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,WAAmB,EAAE,OAAsB;IAC1F,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO;QACP,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAwB;QACvD,MAAM,EAAE,MAAM;KACqB,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,WAAmB,EAAE,OAAsB;IAC1F,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;QACvC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,gBAAgB,IAAI,KAAK;QAC3E,0BAA0B,EAAE,eAAe;QAC3C,WAAW,EAAE;YACX,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,IAAI,EAAE;YACvE,eAAe,EAAE,WAAW,CAAC,eAAe,IAAI,WAAW,CAAC,iBAAiB,IAAI,EAAE;YACnF,YAAY,EAAE,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,aAAa,IAAI,EAAE;SAC1E;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;QACxB,MAAM;QACN,MAAM,EAAE;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU;YAC5C,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC;YAChC,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,OAAO,CAAC,iBAAiB,EAAE,QAAQ,IAAI,OAAO,CAAC,kBAAkB,EAAE,QAAQ;SACtF;QACD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,SAAS,CAAC,eAAe,IAAI,CAAC,CAAC;QAC7E,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,eAAe,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QACzF,iBAAiB,EAAE,KAAK;KACzB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/zip.d.ts

@@ -0,0 +1,17 @@
+export interface TuttiAppManifest {
+    appId?: string;
+    id?: string;
+    version?: string;
+    runtime?: {
+        bootstrap?: string;
+        healthcheckPath?: string;
+    };
+}
+export declare function inspectZip(filePath: string): Promise<{
+    appId: string;
+    sha256: string;
+    sizeBytes: number;
+    version: string;
+    manifest: TuttiAppManifest;
+}>;
+export declare function hashFile(filePath: string): Promise<string>;

package/dist/zip.js

@@ -0,0 +1,66 @@
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { mkdtemp, readFile, rm, stat } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import extract from 'extract-zip';
+export async function inspectZip(filePath) {
+    const info = await stat(filePath);
+    if (!info.isFile()) {
+        throw new Error(`${filePath} is not a file`);
+    }
+    if (!filePath.toLowerCase().endsWith('.zip')) {
+        throw new Error(`${filePath} must be a .zip file`);
+    }
+    const [sha256, manifest] = await Promise.all([hashFile(filePath), readManifestFromZip(filePath)]);
+    const appId = manifest.appId ?? manifest.id;
+    if (!appId) {
+        throw new Error('tutti.app.json missing appId');
+    }
+    if (!manifest.version) {
+        throw new Error('tutti.app.json missing version');
+    }
+    if (!manifest.runtime?.bootstrap) {
+        throw new Error('tutti.app.json missing runtime.bootstrap');
+    }
+    if (!manifest.runtime?.healthcheckPath) {
+        throw new Error('tutti.app.json missing runtime.healthcheckPath');
+    }
+    return {
+        appId,
+        sha256,
+        sizeBytes: info.size,
+        version: manifest.version,
+        manifest,
+    };
+}
+export async function hashFile(filePath) {
+    const hash = createHash('sha256');
+    await new Promise((resolve, reject) => {
+        createReadStream(filePath)
+            .on('data', (chunk) => hash.update(chunk))
+            .on('error', reject)
+            .on('end', resolve);
+    });
+    return hash.digest('hex');
+}
+async function readManifestFromZip(filePath) {
+    const dir = await mkdtemp(join(tmpdir(), 'tutti-admin-zip-'));
+    try {
+        await extract(filePath, { dir });
+        const candidates = ['tutti.app.json', 'app/tutti.app.json'];
+        for (const candidate of candidates) {
+            try {
+                return JSON.parse(await readFile(join(dir, candidate), 'utf8'));
+            }
+            catch {
+                // Try the next common package layout.
+            }
+        }
+        throw new Error('tutti.app.json not found in zip root');
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=zip.js.map

package/dist/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../src/zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,OAAO,MAAM,aAAa,CAAC;AAYlC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,sBAAsB,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM;QACN,SAAS,EAAE,IAAI,CAAC,IAAI;QACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,gBAAgB,CAAC,QAAQ,CAAC;aACvB,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;aACzC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;aACnB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QAC5D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@tutti-os/tutti-admin-cli",
+  "version": "0.1.0",
+  "description": "Internal CLI for Tutti admin operations.",
+  "type": "module",
+  "bin": {
+    "tutti-admin": "dist/index.js",
+    "tutti-admin-cli": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.848.0",
+    "@aws-sdk/lib-storage": "^3.848.0",
+    "commander": "^12.1.0",
+    "extract-zip": "^2.0.1",
+    "formdata-node": "^6.0.3",
+    "mime-types": "^2.1.35"
+  },
+  "devDependencies": {
+    "@types/mime-types": "^2.1.4",
+    "@types/node": "^22.10.2",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "UNLICENSED",
+  "publishConfig": {
+    "access": "public"
+  }
+}